Analysis
- max time kernel
300s - max time network
131s - platform
windows11-21h2_x64 - resource
win11-20260911-en - resource tags
arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
16/09/2026, 14:07
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
ÜnPOS Setup 0.1.11.exe
Resource
win11-20260911-en
14 signatures
300 seconds
Behavioral task
behavioral2
Sample
tancerscanner.exe
Resource
win11-20260911-en
3 signatures
300 seconds
Behavioral task
behavioral3
Sample
Setup.exe
Resource
win11-20260911-en
2 signatures
300 seconds
Behavioral task
behavioral4
Sample
Release.exe
Resource
win11-20260911-en
32 signatures
300 seconds
Behavioral task
behavioral5
Sample
Centra_1.0.3_x64-setup.exe
Resource
win11-20260911-en
3 signatures
300 seconds
Behavioral task
behavioral6
Sample
BOM147-Tasinabilir-1.2.0.exe
Resource
win11-20260911-en
8 signatures
300 seconds
Behavioral task
behavioral7
Sample
Ansiklopedi Setup 1.0.0.exe
Resource
win11-20260911-en
11 signatures
300 seconds
General
- Target Setup.exe
- Size 124.1MB
- Sample260916-re76jsbc53
- SHA256 8700357287c82e270197354a18f5654d52be890e518091d78060346a03912cf2
- MD5 5c5bd9fe6d6ab19525a132fede2e78e8
- SHA1 7de8947222c483e670caf64f8ff5a44176eb209a
- SHA512 1f41e95efc9614e0a40bdc889978256f981c243be65a37f8272611a569cf871a3f0752f10fda44cc562ee18bbb2f8f9058b04fa1a9cec9919aa2e9ef07990124
- SSDEEP 3145728:CNBtvIMw0fUZPh1/xbnExIMw0fUZPh1/xbnE1:XV0fUZfdnjV0fUZfdnk
- TLSH T16E582256E2FD00E8D4BAC1B8C6574627EBB2345513305BEB26A48A252F37FE16E7D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
pid Process 1920 Setup.exe 1920 Setup.exe 1920 Setup.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1920 Setup.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\.net\Setup\V4qNIX8hkadC\D3DCompiler_47_cor3.dll
- Size 4.5MB
- SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
- MD5 19e527a35241c171d37dc1e6c530053c
- SHA1 b1567bada7a27ab78e65da440f21809f50b9d34c
- SHA512 23d38b55f5b17bf0228b16a85787d384da0a700190fc289281190272a0d2dd374be0f7f64d8b642836ccbe2351b72e9ef5c7e2b12d0a7495317e986fd5e3c886
- SSDEEP 49152:c6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/V:cUdeqt737jFm5wd
- TLSH T143268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Setup\V4qNIX8hkadC\PresentationNative_cor3.dll
- Size 1.2MB
- SHA256 7382f135c559fba317f73fbeaf9b84a4f34e760207fd6f31225698b260e26623
- MD5 6e076879ae2567cc58dc750ba5d18b5e
- SHA1 65a53f5e6a832ac42de5b0862e4d494b226a32ac
- SHA512 4d93c2d1979137fa0bb062994b75f97922c6ea2780c9b7bcec7d8fa84c421eb758c5c074b5d588ed42657d1533740256face1774ffe2a0af06190fab547f1855
- SSDEEP 24576:vGD+42x2Jvddeoyo7Pkmn/V1Pt8clT3D4iLFxVCPL67uMFAC0q4dovzvfPbR2R9M:z2BzeoRPkmTP2clT31wPO7hACNYovznF
- TLSH T12A454A62E2E642E5C47FC1B8C6469717FBB0740A131C66DB87608B592F27FE0963E364
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Setup\V4qNIX8hkadC\wpfgfx_cor3.dll
- Size 1.9MB
- SHA256 c6be4d13f18a371c34e2c721fc077595a903b1b0d8def4c51dbe44ec7ecec2b7
- MD5 61bac13362f088cc2da526fac84c0bf0
- SHA1 6f4a1905e0215cb23c73d24c82828e0a69fbd229
- SHA512 a122999160a13398017b9fd27d5e5dc289233ec5920e9dd7a8bb4404a3ce6eeb1cb920229a2e548ad0074b854d221822e5a03dec0a136689c39b37686dbe9ce2
- SSDEEP 24576:wqZcCa3VcWZ/WnkWSB9ax2ugINeqAPpokh2wkJICiWlDHcQTkK/RFqUp:c/eI+nkWc821Fp/QwXCiWdcSck
- TLSH T170955A4AB6AC40E9C47AD23CDADB461FF63178142B6197CF23A0479D6F27BD0497A360
- MD5 SHA1 SHA512 SSDEEP TLSH